You're reading from Mastering Cyber Intelligence Gain comprehensive knowledge and skills to conduct threat intelligence for effective system defense

Product type Paperback

Published in Apr 2022

Publisher Packt

ISBN-13 9781800209404

Length 528 pages

Edition 1st Edition

Concepts

Cybersecurity

Author (1):

Jean Nestor M. Dahj

View More author details

Table of Contents (20) Chapters

Preface

1. Section 1: Cyber Threat Intelligence Life Cycle, Requirements, and Tradecraft

2. Chapter 1: Cyber Threat Intelligence Life Cycle FREE CHAPTER

3. Chapter 2: Requirements and Intelligence Team Implementation

4. Chapter 3: Cyber Threat Intelligence Frameworks

5. Chapter 4: Cyber Threat Intelligence Tradecraft and Standards

6. Chapter 5: Goal Setting, Procedures for CTI Strategy, and Practical Use Cases

7. Section 2: Cyber Threat Analytical Modeling and Defensive Mechanisms

8. Chapter 6: Cyber Threat Modeling and Adversary Analysis

9. Chapter 7: Threat Intelligence Data Sources

10. Chapter 8: Effective Defense Tactics and Data Protection

11. Chapter 9: AI Applications in Cyber Threat Analytics

12. Chapter 10: Threat Modeling and Analysis – Practical Use Cases

13. Section 3: Integrating Cyber Threat Intelligence Strategy to Business processes

14. Chapter 11: Usable Security: Threat Intelligence as Part of the Process

15. Chapter 12: SIEM Solutions and Intelligence-Driven SOCs

16. Chapter 13: Threat Intelligence Metrics, Indicators of Compromise, and the Pyramid of Pain

17. Chapter 14: Threat Intelligence Reporting and Dissemination

18. Chapter 15: Threat Intelligence Sharing and Cyber Activity Attribution – Practical Use Cases

19. Other Books You May Enjoy

Conventions used

There are a number of text conventions used throughout this book.

Code in text: Indicates code words in the text, indicators of compromise, port number, folder names, filenames, file extensions, and pathnames. Here is an example: "We pivot through the proxy logs, searching for /sys/files/ patterns in all web transactions, not in the 125.19.103.198 IP communication."

A block of code is set as follows:

{
      ""title"": "CTI TAXII server",
      ""description"": "This TAXII server contains a listing of ATT&CK domain collections expressed as STIX, including PRE-ATT&CK, ATT&CK for Enterprise, and ATT&CK Mobile.",
      "contact": "attack@mitre.org",
      "default": "https://cti-taxii.mitre.org/stix/",
      "api_roots": [
          "https://cti-taxii.mitre.org/stix/"
      ]
}

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

raw_data.scan.port:554
raw_data.ja3.fingerprint:795bc7ce13f60d61e9ac03611dd36d90

Any command-line input or output is written as follows:

$ mkdir css
$ cd css

Bold: Indicates a new term, an important word, or words that you see onscreen. For instance, words in menus or dialog boxes appear in bold. Here is an example: "Select System info from the Administration panel."

Tips or important notes

Appear like this.

The rest of the chapter is locked

You're reading from Mastering Cyber Intelligence Gain comprehensive knowledge and skills to conduct threat intelligence for effective system defense

Table of Contents (20) Chapters

Conventions used

Authors (1)

Personalised recommendations for you

You're reading from Mastering Cyber Intelligence Gain comprehensive knowledge and skills to conduct threat intelligence for effective system defense

Table of Contents (20) Chapters

Conventions used

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you